$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf14f02-6b9c-3804-aa27-dd5a687a45bf.roa File: 2bf14f02-6b9c-3804-aa27-dd5a687a45bf.roa (raw, json) Hash identifier: jxgfEjpM9aqT5hVICc9lO8L477h4T7KzGGoSwVbowAQ= Subject key identifier: 9E:0B:D2:BA:FA:D7:16:A1:D8:AA:FA:A1:B8:66:92:29:87:46:CE:45 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DA71037CD0E1C98880D50B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf14f02-6b9c-3804-aa27-dd5a687a45bf.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.90.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:03:7c:d0:e1:c9:88:80:d5:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=9440eb81-a8c4-4fbb-b496-baae7b6412a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0b:d8:d4:20:1b:f0:b7:34:0c:fe:6e:d3:2c: 62:18:18:5a:f8:14:53:95:30:d6:72:86:f1:40:80: 1f:a5:3a:30:f1:5d:bb:06:29:be:92:c0:53:a3:3c: 3c:40:ec:46:e5:55:b2:28:57:0a:9e:a2:ad:4d:9f: 01:3f:e3:36:0d:1a:1a:04:4c:41:d6:18:08:2e:23: 25:a9:d9:a4:0e:3e:6c:50:d1:df:67:79:6e:0e:f6: 64:2e:73:15:16:8f:78:c6:bb:05:bf:e9:49:a5:6b: fa:11:50:3e:96:a9:29:86:bb:95:bf:5c:df:11:c1: 47:b0:1b:98:48:83:a9:bf:ef:bf:d7:40:44:8d:55: 83:32:ad:51:81:31:25:65:1c:ff:df:b2:6c:65:39: c9:a8:e2:56:0e:23:5b:1c:6b:7f:9c:2c:e8:3e:65: f7:78:c0:6a:6a:ec:79:8a:dc:4a:3c:03:e9:9c:f6: 08:84:28:9e:10:9a:13:30:17:00:3f:89:b0:f0:35: f7:43:8f:28:36:1f:47:fe:cf:73:f8:d5:d0:6e:de: cb:a7:57:2e:76:04:f1:95:af:48:b2:7c:83:47:ee: 26:ef:01:64:da:fa:ad:32:53:18:b8:f3:35:e5:af: e8:f6:2b:cd:74:ac:6e:1c:2a:76:6a:72:3f:36:49: 10:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0B:D2:BA:FA:D7:16:A1:D8:AA:FA:A1:B8:66:92:29:87:46:CE:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf14f02-6b9c-3804-aa27-dd5a687a45bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:4e:a4:86:2f:e9:60:c8:29:23:65:4b:b8:f7:41:f0:a0:3e: 96:7c:2e:40:8f:76:73:15:b3:76:79:38:87:af:8d:85:d2:a7: e1:33:8b:03:c0:bd:6d:50:1e:39:a5:5c:d7:ed:4f:d0:58:b6: b0:6b:a7:d9:92:33:f1:85:14:48:e8:22:2c:18:13:2e:94:55: a3:e1:6a:dd:9d:3f:df:4d:cc:05:0a:b2:e3:f8:17:8f:07:60: c8:d1:6a:ab:5a:18:c6:9f:db:4b:8d:f4:22:8b:55:65:43:d2: 52:12:63:18:c1:6d:90:49:e1:cf:1a:77:ef:2a:2e:b0:89:ef: 8f:65:70:f2:b0:df:b0:fb:3c:7b:96:2c:33:80:c3:89:08:3e: 9a:10:08:42:45:64:30:64:0a:be:f8:71:09:a7:91:fe:0a:89: 18:b7:8b:9e:0e:79:2a:05:c5:34:19:63:bd:f0:51:97:32:72: 8e:c9:49:63:50:cd:cf:af:b2:e6:b2:c6:a2:0f:c3:35:ca:7a: 14:4b:61:ee:0a:7e:8a:66:11:82:1d:8d:f0:49:7a:1d:9b:37: 03:d7:6f:4b:6a:39:6f:f6:2b:49:79:c2:9e:72:bd:dc:5f:86: 2a:7d:76:1b:38:ce:1a:64:c2:2c:5d:58:fa:60:24:3a:5d:3a: f7:79:54:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQN80OHJiIDVCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk OTQ0MGViODEtYThjNC00ZmJiLWI0OTYtYmFhZTdiNjQxMmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgvY1CAb8Lc0DP5u0yxiGBha+BRTlTDWcobx QIAfpTow8V27Bim+ksBTozw8QOxG5VWyKFcKnqKtTZ8BP+M2DRoaBExB1hgILiMl qdmkDj5sUNHfZ3luDvZkLnMVFo94xrsFv+lJpWv6EVA+lqkphruVv1zfEcFHsBuY SIOpv++/10BEjVWDMq1RgTElZRz/37JsZTnJqOJWDiNbHGt/nCzoPmX3eMBqaux5 itxKPAPpnPYIhCieEJoTMBcAP4mw8DX3Q48oNh9H/s9z+NXQbt7Lp1cudgTxla9I snyDR+4m7wFk2vqtMlMYuPM15a/o9ivNdKxuHCp2anI/NkkQ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4L0rr61xah2Kr6obhmkimHRs5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmJmMTRmMDItNmI5Yy0z ODA0LWFhMjctZGQ1YTY4N2E0NWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1roMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANOpIYv6WDIKSNlS7j3QfCgPpZ8LkCPdnMVs3Z5OIevjYXSp+EziwPA vW1QHjmlXNftT9BYtrBrp9mSM/GFFEjoIiwYEy6UVaPhat2dP99NzAUKsuP4F48H YMjRaqtaGMaf20uN9CKLVWVD0lISYxjBbZBJ4c8ad+8qLrCJ749lcPKw37D7PHuW LDOAw4kIPpoQCEJFZDBkCr74cQmnkf4KiRi3i54OeSoFxTQZY73wUZcyco7JSWNQ zc+vsuayxqIPwzXKehRLYe4KfopmEYIdjfBJeh2bNwPXb0tqOW/2K0l5wp5yvdxf hip9dhs4zhpkwixdWPpgJDpdOvd5VP0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:24 2025 by rpki-client